RHBA-2012:1249 - Bug Fix Advisory

Topic

Updated ipsec-tools packages that fix two bugs is now available for Red Hat
Enterprise Linux 5.

Description

The ipsec-tools packages contain configuration and management tools for the
IPsec protocol.

This update fixes the following bugs:

• Under certain circumstances, the racoon daemon terminated unexpectedly due to

referencing a NULL pointer when writing to the system log. The update ensures
that the NULL pointer is never referenced by racoon in this scenario, thus
fixing this bug. (BZ#852735)

• When using the setkey command to dump the pfkey database, the setkey command

could decrease the size of a kernel buffer that is used to send the data.
Consequently, the dumped database was incomplete and the operation failed with
an error in the recv() function. With this update, setkey never decreases the
kernel buffer size, thus preventing this bug. (BZ#852734)

All users of ipsec-tools are advised to upgrade to these updated package, which
fix these bugs.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

CVEs

(none)

References

(none)